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Address Books

- Email address books for most major webmail are collected as
stand-alone sessions (no content present*)

- Address books are repetitive, large, and metadata-rich
- Data is stored multiple times (MARINA/MAINWAY, PINWALE, CLOUDS)
- Fewer and fewer address books attributable to users, targets

- Address books account for ~ 22% of SSO’s major accesses (up
from ~ 12% in August)

 

'Access (10 Jan 12) Total Sessions Address Books ' Provider Collected Attributed Attributed%
US—3171 1488453 237067 (16% of trafﬁc) Yahoo 444743 11009 2.48%
DS—ZOOB 938378 311113 (33% of trafﬁc) Hotmail 105053 1115 1.05%
US-3261 94132 2477 (3% of trafﬁc) Gma“ 33597 2350 5.97%
US-3145 177663  (16% Of trafﬁc) Facebook 82857 79437 95.87%
US—3180 269794 40409 (15% of traffic) Other 22881 1175 5.14%
US—3180 (16 Dec 11) 289318 91964 (32% of traffic) TOTAL 689246 95086 13.80%
TOTAL 3257738 712366 (22% of traffic)
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Address Books

- Enabled in SCISSORS for various 880 sites:

— JPMQ (metadata: QMPJ) - Ds—2003 (MUSCULAR) 29 Feb 2012
— DGOT (metadata: TOGD) - us—3171 (DANCINGOASIS) 13 Mar 2012
— DGOD (metadata: DOGD) - us—3171 (DANCINGOASIS) 13 Mar 2012
— SPNN (metadata: NNPS) — US-3180 (SPINNERET) 03 May 2012
— EGLP (metadata: PLGE) — us—3145 (MOONLIGHTPATH) 08 May 2012
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(SI/SI) Ownerless Address Books Blocked by SCISSORS (MB)
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Selector Detasks

 

 

Emergency Detasks

140
120
100
80
60
4O
20

Nov-11 Dec-11 Jan.12 Fob.12 Mar-12 Apr-12 May-12

 

TOP SECRET/ISIIINOFORN

 

TOP SECRET/ISIIINOFORN

So What?

- Store less of the wrong data
— 20% reduction (so far) in content to long-term repositories
— Data still resides at site for SIGDEV
- Increase data variety
— Hole left by “wrong data” filled with more “right data”
— More signals and case notations can be tasked at site
- Shifting collection philosophy at NSA

— “Memorialize what you need” versus “Order one of
everything off the menu and eat what you want”

 

WlKl: https://wiki.nsa.ic.gov/wiki/Collection_Optimization
XKEYSCORE: fingerprint/defeats/atrouter and fingerprint/defeats/atxks
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http://www.documentcloud.org/notes/print?docs[]=804765

Collection Optimization
7 Pages - Contributed by Matt DeLong, Washington Post - Oct 14, 2013

This is another presentation on problems with NSA overcollection.
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- Enabled in SCISSDRS fur various 530 sites:
— 4m imam: mil-J} - manna {lineman} 2! Fun 11:12
- new {rm-darn: roam - new :-'1 mammals; 13 Mar 2012
— Daub mam: poem — Lisam Wimm 13 Mar 11:12
- mu Wu: HHPE} r usman [SHNNEREH in may 2:112
— EGLP {rnalﬁdnlm PLGEJ . LIE—3145 rummumwATI-t} as m 2m:
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- Store toes of the wrong data
- 2W: reduction {so far] in content to long-tem'l repositorieo
— Data still resides at site for SIGDEV

 

 

"EhH'tlh-g collection Whose-p11? at PISA" lip. 7"]

* Shiﬁing collection philosophy at NSA
- “Memoriatize what you need' ver5u5 "Order one of
euerything oft the menu and eat what you want“
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